CVE-2023-45799 — MLSoft TCO!stream Remote Code Execution Vulnerability

CVE-2023-45799

MLSoft TCO!stream Remote Code Execution Vulnerability PUBLISHED

Description (CNA)

In MLSoft TCO!stream versions 8.0.22.1115 and below, a vulnerability exists due to insufficient permission validation. This allows an attacker to make the victim download and execute arbitrary files.

Affected (CNA)

Vendor / product	Versions
MLSoft / TCO!stream	affected 0 through 8.0.22.1115

CWE

CWE-494

References

https://www.boho.or.kr/kr/bbs/view.do?bbsId=B0000133&nttId=71008&menuNo=205020

ADP enrichment

CVE

No English description supplied.

https://www.boho.or.kr/kr/bbs/view.do?bbsId=B0000133&nttId=71008&menuNo=205020

CISA-ADP

No English description supplied.

No references supplied.